Re: Audit policy problem (deleted file name)
- From: "Roger Abell [MVP]" <mvpNoSpam@xxxxxxx>
- Date: Mon, 28 May 2007 13:00:15 -0700
Tell us what audit settings you are using for files.
For example, audit Full Control success by Everyone.
"Mavieksen" <mavieksen@xxxxxxxxxxx> wrote in message
news:700D49AD-24A0-493C-9E87-F06CE10BB400@xxxxxxxxxxxxxxxx
Hi,
i am trying to using audit poliy for files and folder (in win2003
domain)..
i saw security events successufully about accessed files (who accessed,
when
accessed, ..) also true location and file name; for example
D:\new folder\document.doc
but i couldn't see file name when i deleted any file; i just saw that
"explore.exe" as file name :(
for example
D:\new folder\explorer.exe
i want to see that deleted file names when a user delet it truly...
What can i do ?
Thanks for everythings...
.
- Prev by Date: Re: Remote desktop: cannot copy files why
- Next by Date: Re: Remote desktop: cannot copy files why
- Previous by thread: Remote desktop: cannot copy files why
- Next by thread: Fatal exception 0E has occurred at 0028:c000A97F in VXD VMM(01)+000997F Seems to be after network logon.
- Index(es):